Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/muK-eIunaEEZ4gzY75ZVfs9EgZw.roa
File: muK-eIunaEEZ4gzY75ZVfs9EgZw.roa (raw, json)
Hash identifier: rN0YY3hDnscz1PriuMQUEcwib4dgYZy/X6NwoEo9PHM=
Subject key identifier: 9A:E2:BE:78:8B:A7:68:41:19:E2:0C:D8:EF:96:55:7E:CF:44:81:9C
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018608493B518FB63DCB9D4C66362FC8CCE0
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/muK-eIunaEEZ4gzY75ZVfs9EgZw.roa
Signing time: Tue 31 Jan 2023 14:44:22 +0000
ROA not before: Tue 31 Jan 2023 14:44:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211456
IP address blocks: 185.7.218.0/24 maxlen: 24
95.169.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:3b:51:8f:b6:3d:cb:9d:4c:66:36:2f:c8:cc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae2be788ba7684119e20cd8ef96557ecf44819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:e0:8d:18:cd:5f:ed:40:73:ee:8a:cf:3b:
64:67:db:ed:04:5f:58:48:8b:09:8c:a5:0e:76:f1:
9a:7d:0a:db:34:4d:bb:e1:5e:1b:86:1b:16:84:ee:
0d:2e:97:10:83:5c:ac:8a:e9:f3:dd:e9:b5:d8:6a:
4e:65:9c:5a:4f:4c:70:5a:f6:50:79:06:20:88:53:
1c:7a:0a:d1:81:a9:17:d9:f1:53:e1:e6:a8:05:18:
92:02:2b:09:2c:67:c8:53:1b:e5:2d:0c:cc:5e:c4:
85:51:7e:03:e8:96:f1:b3:7b:1a:c3:57:55:3a:91:
67:91:14:f3:e8:a9:91:36:d9:a2:4f:21:d4:78:bf:
07:7f:ea:b7:61:91:a4:a0:91:50:99:e8:83:b2:29:
49:90:25:6a:cc:01:ab:10:a3:ef:b0:4d:2c:33:bb:
79:33:75:ec:d3:a3:ca:06:c8:a5:22:61:bb:4d:09:
12:4b:5b:96:95:d8:87:9a:c8:8a:da:18:26:92:95:
8f:4a:e9:d7:16:aa:23:d7:3b:ae:31:92:57:d2:00:
9d:85:cc:ba:e8:e4:34:bc:b6:75:b7:50:f0:76:d8:
3a:c5:67:e0:60:c0:c3:5d:b9:2c:3b:e8:39:8a:7f:
71:36:4f:1c:9d:73:91:ff:d0:d5:42:9b:37:aa:c8:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:BE:78:8B:A7:68:41:19:E2:0C:D8:EF:96:55:7E:CF:44:81:9C
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/muK-eIunaEEZ4gzY75ZVfs9EgZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.209.0/24
185.7.218.0/24
Signature Algorithm: sha256WithRSAEncryption
59:66:a4:08:24:94:be:61:af:1e:60:8b:98:99:a2:40:dd:3b:
42:07:eb:f6:94:28:d3:4b:82:c0:ce:b0:55:aa:0e:46:c2:c2:
2a:13:ac:51:79:45:53:23:8d:aa:f2:8b:ed:86:ca:d2:1f:5d:
5d:a1:9e:8e:03:5f:6a:af:c2:2e:8c:79:6a:8b:1d:6f:c6:41:
c5:81:a3:82:e1:d0:b5:f5:f8:cb:bf:83:0e:3e:86:6a:09:8c:
6b:5d:85:19:6a:22:93:9c:f9:81:49:5b:db:da:3b:19:8c:5b:
b1:ee:da:1a:84:84:22:b7:1f:e2:e8:49:87:9f:8d:39:42:4f:
af:dd:e0:8e:65:09:26:0a:7a:41:65:7f:8c:d6:02:f6:23:6c:
be:70:7a:cf:ac:f6:d2:88:cc:0f:d8:a5:db:3c:30:8c:d4:fa:
35:cb:48:4a:b1:31:69:53:3f:a2:2e:79:15:bd:2b:12:55:a0:
41:b6:58:8e:46:f1:60:38:4b:e2:4f:1d:9c:09:05:d0:81:a7:
35:18:19:72:76:6a:5d:f2:af:c5:90:41:3c:d1:5b:19:aa:89:
25:09:ce:72:fc:0e:2f:af:e3:50:3a:e7:e4:22:be:8f:88:67:
11:6d:46:48:f7:c3:a6:08:42:c3:9c:6e:49:d0:ec:6b:10:10:
c8:7c:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:50 2024 by rpki-client on console-ams.rpki-client.org